This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/54245a-993d-41de-9091-6daa4a4a421c/1/xljr82IzPBhfPBI8Qr5En9KneTg.mft File: xljr82IzPBhfPBI8Qr5En9KneTg.mft (raw, json) Hash identifier: GYRxYDslkh86r3XDH5mcTjO2PVaoPiOgMetYUNaOBSw= Subject key identifier: 1E:57:2A:D4:2A:27:1C:F7:C0:39:EC:A6:18:C3:B1:F6:FA:F3:B4:7C Authority key identifier: C6:58:EB:F3:62:33:3C:18:5F:3C:12:3C:42:BE:44:9F:D2:A7:79:38 Certificate issuer: /CN=c658ebf362333c185f3c123c42be449fd2a77938 Certificate serial: 019AF5407DBC5D30AC33ACBD5D7564965612 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xljr82IzPBhfPBI8Qr5En9KneTg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/54245a-993d-41de-9091-6daa4a4a421c/1/xljr82IzPBhfPBI8Qr5En9KneTg.mft Manifest number: 8A Signing time: Sat 06 Dec 2025 20:00:35 +0000 Manifest this update: Sat 06 Dec 2025 20:00:35 +0000 Manifest next update: Sun 07 Dec 2025 20:00:35 +0000 Files and hashes: 1: xljr82IzPBhfPBI8Qr5En9KneTg.crl (hash: h3FTWPhHOmcFGtnSQrzHHkXoQJsjVHLHTH8W7s/q/hA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/54245a-993d-41de-9091-6daa4a4a421c/1/xljr82IzPBhfPBI8Qr5En9KneTg.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/54245a-993d-41de-9091-6daa4a4a421c/1/xljr82IzPBhfPBI8Qr5En9KneTg.mft rsync://rpki.ripe.net/repository/DEFAULT/xljr82IzPBhfPBI8Qr5En9KneTg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:7d:bc:5d:30:ac:33:ac:bd:5d:75:64:96:56:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c658ebf362333c185f3c123c42be449fd2a77938 Validity Not Before: Dec 6 20:00:35 2025 GMT Not After : Dec 7 20:00:35 2025 GMT Subject: CN=1e572ad42a271cf7c039eca618c3b1f6faf3b47c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8b:3d:9c:96:41:c3:37:22:da:65:0d:db:e4: 7f:6a:70:77:f1:c1:14:44:ff:d5:91:31:a1:6d:2a: f7:8a:6a:41:e2:89:05:f7:b6:a8:09:08:d4:a3:86: 83:d5:fe:34:eb:ad:42:c7:1d:32:1f:23:9e:d8:52: 4a:89:0d:38:d0:94:89:10:c1:c4:d1:e5:db:18:aa: 89:c8:cd:af:65:29:e8:57:87:ca:52:fb:70:6f:e4: d2:e2:22:74:88:1b:4f:82:3c:7e:a6:d7:ea:db:83: e6:a7:9c:1a:97:59:63:94:86:d7:cb:92:a3:44:9f: 9f:f5:0b:5b:b5:21:ca:96:60:3b:3d:50:4d:c7:ff: 83:c8:56:9c:5c:96:bc:43:14:50:6c:1b:18:a7:60: 31:c6:d5:9c:02:8f:6c:12:2a:11:50:f5:f8:f0:b0: 73:b7:28:38:b1:83:b0:6c:a5:35:4c:f1:00:fb:c1: 91:cd:5d:ae:47:74:66:3e:75:36:f0:28:42:33:f7: bd:60:b7:89:d4:0b:13:f3:d0:7f:ee:5a:6f:83:43: d8:52:88:00:f5:6e:48:50:7d:cb:95:a4:2c:b8:c0: 01:8d:fa:1a:2b:6f:24:4d:06:c4:6b:f3:0b:d9:61: 6d:9f:fe:b4:9e:35:ad:c3:3e:72:0e:a6:7b:a1:ce: 77:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:57:2A:D4:2A:27:1C:F7:C0:39:EC:A6:18:C3:B1:F6:FA:F3:B4:7C X509v3 Authority Key Identifier: keyid:C6:58:EB:F3:62:33:3C:18:5F:3C:12:3C:42:BE:44:9F:D2:A7:79:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xljr82IzPBhfPBI8Qr5En9KneTg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/54245a-993d-41de-9091-6daa4a4a421c/1/xljr82IzPBhfPBI8Qr5En9KneTg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/54245a-993d-41de-9091-6daa4a4a421c/1/xljr82IzPBhfPBI8Qr5En9KneTg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:f6:03:ae:5f:1b:ad:42:14:de:1b:5e:4a:6e:d1:9c:8c:fc: ab:02:f9:6e:c1:a9:c0:2f:ba:78:09:62:03:aa:e3:87:55:4a: ff:14:64:da:2c:ad:b2:11:16:d7:6b:4d:0e:c6:bf:3a:2f:5e: db:f1:e8:de:cf:d1:64:10:4c:2e:4d:02:95:8a:80:31:5d:00: 61:f1:d4:8e:bf:bf:6e:f1:e5:d3:42:f5:86:90:c9:d2:dc:0b: 79:8d:7e:b4:d8:d9:d2:79:92:26:51:6f:11:2a:ca:52:0c:9b: 4e:2f:31:62:16:78:01:68:f9:88:ca:d3:77:09:93:50:6e:75: 52:24:cb:4d:14:e1:cc:41:3e:09:41:8c:1d:0b:f4:8a:3e:2a: ad:8e:ba:57:32:e3:eb:f9:82:76:fd:a3:ef:b0:df:c0:0a:bb: 6f:88:9e:81:97:68:04:a9:44:21:c7:ec:c0:e8:20:32:20:60: a5:03:09:48:bd:60:90:db:95:2a:12:47:80:69:2e:6f:92:bc: 09:18:1e:08:4d:41:f4:db:86:70:0d:e4:3a:29:1f:59:80:0a: 5e:71:ac:42:4b:4d:32:64:49:78:fc:3c:bc:8b:8a:bd:9a:da: 06:e0:32:47:d8:b6:b3:a9:eb:fe:6f:13:59:ce:d0:2d:37:bd: 3e:8a:0f:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QH28XTCsM6y9XXVkllYSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NThlYmYzNjIzMzNjMTg1ZjNjMTIzYzQyYmU0NDlmZDJh Nzc5MzgwHhcNMjUxMjA2MjAwMDM1WhcNMjUxMjA3MjAwMDM1WjAzMTEwLwYDVQQD EygxZTU3MmFkNDJhMjcxY2Y3YzAzOWVjYTYxOGMzYjFmNmZhZjNiNDdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYs9nJZBwzci2mUN2+R/anB38cEU RP/VkTGhbSr3impB4okF97aoCQjUo4aD1f40661Cxx0yHyOe2FJKiQ040JSJEMHE 0eXbGKqJyM2vZSnoV4fKUvtwb+TS4iJ0iBtPgjx+ptfq24Pmp5wal1ljlIbXy5Kj RJ+f9QtbtSHKlmA7PVBNx/+DyFacXJa8QxRQbBsYp2AxxtWcAo9sEioRUPX48LBz tyg4sYOwbKU1TPEA+8GRzV2uR3RmPnU28ChCM/e9YLeJ1AsT89B/7lpvg0PYUogA 9W5IUH3LlaQsuMABjfoaK28kTQbEa/ML2WFtn/60njWtwz5yDqZ7oc53qwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB5XKtQqJxz3wDnsphjDsfb687R8MB8GA1UdIwQY MBaAFMZY6/NiMzwYXzwSPEK+RJ/Sp3k4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGxqcjgySXpQQmhmUEJJOFFyNUVuOUtuZVRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC81NDI0NWEtOTkzZC00MWRlLTkwOTEt NmRhYTRhNGE0MjFjLzEveGxqcjgySXpQQmhmUEJJOFFyNUVuOUtuZVRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC81NDI0NWEtOTkzZC00MWRlLTkwOTEtNmRhYTRhNGE0MjFj LzEveGxqcjgySXpQQmhmUEJJOFFyNUVuOUtuZVRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR/YDrl8b rUIU3hteSm7RnIz8qwL5bsGpwC+6eAliA6rjh1VK/xRk2iytshEW12tNDsa/Oi9e 2/Ho3s/RZBBMLk0ClYqAMV0AYfHUjr+/bvHl00L1hpDJ0twLeY1+tNjZ0nmSJlFv ESrKUgybTi8xYhZ4AWj5iMrTdwmTUG51UiTLTRThzEE+CUGMHQv0ij4qrY66VzLj 6/mCdv2j77DfwAq7b4iegZdoBKlEIcfswOggMiBgpQMJSL1gkNuVKhJHgGkub5K8 CRgeCE1B9NuGcA3kOikfWYAKXnGsQktNMmRJePw8vIuKvZraBuAyR9i2s6nr/m8T Wc7QLTe9PooPCw== -----END CERTIFICATE-----Generated at Sun Dec 7 06:17:53 2025 by rpki-client